The NCSC will lead in creating, chairing and implementing a new Public Sector IT Security forum, with Heads of IT security from across Government Departments and Agencies. The forum will meet quarterly to exchange and share information around best practice, inter organisational processes, cyber security threats and measures to comply with the new public sector cyber security baseline standard. 11. The NCSC will be tasked by Government to issue recommendations with regard to the use of specific software and hardware on Government IT and telecommunications infrastructure. The NCSC will be tasked to issue recommendations with regard to the procurement and use of certain types of IT infrastructure and software in securing Government data and services, and to recommend the prohibition or removal of certain infrastructure from Government IT networks and communications if the NCSC determines that its presence poses an unacceptable risk to the security of Government data. Measure 8: The NCSC will develop a baseline security standard to be applied by all Government Departments and key agencies. Actions for Delivery Timeline by Lead Quarter 1 Design suitable minimum standard Q4 2021 for Government IT, in conjunction 2 Key Stakeholders NCSC/OGCIO/Govt Government IT Forum Departments with Government IT Security and key Forum. agencies Develop detailed measures, Q1 2022 controls and implementation NCSC/OGCIO/Govt Government IT Forum procedures. Departments and key agencies 3 Draft guidance and support Q2 2022 materials for IT teams and Internal 4 NCSC/OGCIO/Govt Government IT Forum Departments Audit Units on compliance and key assessment. agencies Support Government Departments and Key Agencies in implementation of the baseline Ongoing NCSC/OGCIO/Govt Government IT Forum Departments and key 33

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents